607 results about "Network router" patented technology

A method and system for security monitoring in a computer network has a packet sink with filtering and data analysis capabilities. The packet sink is a default destination for data packets having an address unrecognized by the network routers. At the packet sink, the packets are filtered and statistical summaries about the data traffic are created. The packet sink then forwards the data to a monitor, the information content depending on the level of traffic in the network.

Systems, methods, and apparatus embodiments for electric power grid and network registration and management of active grid elements. Grid elements are transformed into active grid elements following initial registration of each grid element with the system, preferably through network-based communication between the grid elements and a coordinator, either in coordination with or outside of an IP-based communications network router. A multiplicity of active grid elements function in the grid for supply capacity, supply and / or load curtailment as supply or capacity. Also preferably, messaging is managed through a network by a Coordinator using IP messaging for communication with the grid elements, with the energy management system (EMS), and with the utilities, market participants, and / or grid operators.

Systems, methods, and apparatus embodiments for electric power grid and network registration and management of active grid elements. Grid elements are transformed into active grid elements following initial registration of each grid element with the system, preferably through network-based communication between the grid elements and a coordinator, either in coordination with or outside of an IP-based communications network router. A multiplicity of active grid elements function in the grid for supply capacity, supply and / or load curtailment as supply or capacity. Also preferably, messaging is managed through a network by a Coordinator using IP messaging for communication with the grid elements, with the energy management system (EMS), and with the utilities, market participants, and / or grid operators.

The network monitoring system comprises a network router with built-in monitoring data gathering. The network router includes channels through which data pass in packets. Each of the packets includes a packet header. The network router additionally includes a header copier and a packet generator. The header copier generates a header copy from the packet header of at least some of the packets. The packet generator receives the header copies and forms monitoring data packets from them. Each monitoring data packet additionally represents temporal data relating to the header copies included in it. A method of obtaining performance data relating to a data transmission network that includes a node passes data through the node in packets. Each of the packets includes a packet header. At least some of the packet headers are copied to obtain respective header copies as monitoring data from which monitoring data packets are formed. The monitoring data packets additionally represent temporal data relating to the header copies included in them. The monitoring data packets are transmitted and the performance data are generated from the monitoring data contained in the monitoring data packets.

A virtual private network enables private communications over a shared MPLS network between two or more private networks. The virtual private networks include a first router connected to the shared MPLS network and configured to dynamically distribute first router VPN information across the shared MPLS network. The first router VPN information includes a VPN identifier which is assigned to the first router. The VPN also includes a second router connected to the shared MPLS network and and configured to dynamically distribute second router VPN information across the shared MPLS network. The second router VPN information includes a VPN identifier which is assigned to the second router and which is identical to the VPN identifier assigned to the first router. The first and second routers are also configured to establish label switched paths therebetween. A method of automatically configuring virtual private networks over a shared MPLS network includes creating a link between a private network router and a shared network router. It also includes assigning a VPN identifier to the shared network router, assigning the same VPN identifier to at least one other shared network router, determining all shared network routers which are assigned the same VPN identifier, and creating at least two label switched paths between the shared network router and the other shared network routers.

In embodiments of the present invention improved capabilities are described for identifying unauthorized endpoints. The present invention includes computer implemented methods and systems for actively polling and monitoring network devices, such as network routers and switches, to obtain information on any or all of the endpoints on a network with which the router or switch may have communicated. Address information acquired through polling is compared with an authorized endpoint list, which is generated from information reported to the store by security agents on the authorized endpoints and which is stored in a security compliance store, in order to identify unauthorized endpoints. Methods and systems disclosed herein also include remediation measures to be taken on the unauthorized endpoints. Related user interfaces, applications, and computer program products are disclosed.

The invention is directed to configuring services in a packet switching network. Embodiments of the invention group existing service policies configured on network routers into policy groups, thereby enabling better management of service policies and policy overrides. This functionality can be useful for identifying redundant policies that may be eliminated by reconfiguring one or more of the network routers to reduce the overall network-wide number of policies, as well as provisioning new services in a manner that efficiently uses existing policies.

The accuracy of configuration data within routers of a network are critical in today's networks for security of the network, efficient operating of the network and to ensure corporate requirements, such as redundancy, are met. Since configuration data is typically entered and modified manually by technicians, considerable human errors occur. A configuration validation system provides an automated capability to ensure accuracy within the routers of a network. In this system, the validation is completed utilizing dynamically set conditions based upon the utilization of the router and a characteristic of the router, such as the model type. The utilization of the router includes the services that are supported by the router and the position of the router within the network, both of these criteria of the router having specific configuration requirements. The utilization of the routers can be detected by look-up within an inventory database and / or analysing the applicable configuration data. During the validation process, any discrepancies can be logged. At completion, these discrepancies can be listed within a report of configuration problems to be fixed or be automatically sent to the routers within the network to correct the configuration data.

A Dynamic Content Addressable Memory (DCAM) cell topology that contains fewer that can perform a "hidden" refresh of stored data that does not delay nor interrupt the CAM search cycle, thereby providing SCAM-like performance. A non-destructive read operation, is performed such that the stored-data does not have to be written back because of a refresh-read operation. A reliable CAM search can be performed after a read operation and before or even while the refresh-data is being written back. Soft-error detection processes can be performed on each CAM entry during the pendency of the refresh cycle. The DCAM cell can be used in a digital system such as a digital computer and a Network Router.

A wireless mobile router (140) includes wireless network interfaces (202) and (218) attached to a network controller (142). The wireless network interface (202) communicates with a cellular network (110) to access cellular network services. The wireless network interface (218) and the network controller (142) comprise a WLAN (170) or PAN (180) network router hosting a plurality of client devices. Each client device may access a wide area network, WAN over the cellular network. The wireless mobile router (140) is configured to exchange various cellular network signals with various WLAN and PAN networks. The wireless mobile router (140) is particularly suitable for use in a vehicle or at locations where WAN access is not readily available.

A data server system / method allowing cloud data server functionality in a coordinated / concerted fashion within network configurations that are local to and / or spanning network gateway routers is disclosed. The system may utilize a smart gateway power controller (SGPC) augmented with storage media and / or expansion slots to interact within a home automation network (HAN) to permit the local HAN to operate as a distinct network and allow access to locally stored data from remote networks such as the Internet. The system permits inter-networking of HAN devices (including SGPCs) and integration of data management within home automation networks while still providing access to HAN data via external remote networks such as the Internet. The system / method allows remote network access to HAN device data from local / remote access devices including mobile phones, tablet computers, laptops, desktop computers, and the like.

Methods, apparatuses and systems directed to a network traffic synchronization mechanism facilitating the deployment of network devices in redundant network topologies. In certain embodiments, when a first network device directly receives network traffic, it copies the network traffic and transmits it to at least one partner network device. The partner network device processes the copied network traffic, just as if it had received it directly, but, in one embodiment, discards the traffic before forwarding it on to its destination. In one embodiment, the partner network devices are operative to exchange directly received network traffic. As a result, the present invention provides enhanced reliability and seamless failover. Each unit, for example, is ready at any time to take over for the other unit should a failure occur. As discussed below, the network traffic synchronization mechanism can be applied to a variety of network devices, such as firewalls, gateways, network routers, and bandwidth management devices.

A delay measurement technique according to an embodiment according to the present invention is based on the precept, ascertained by the inventors, that a link between network nodes will often contribute to the delay encountered between several different pairs of network nodes. Such a technique identifies the path between each pair of nodes by a list of links that form the path. Paths that are orthogonal are treated as being necessary for describing the delays encountered between nodes, and, once the requisite set of orthogonal paths has been derived, all other paths can be described in terms of one or more of these orthogonal paths. Such a technique also lends itself to matrix representation of the paths, and the use of matrix manipulation techniques in deriving delay and jitter.

A method is provided to allocate bandwidth from a first node to a second node in a optical network. The method begins by accepting a request from an end-user, who requests a virtual path between the first node and the second node. The first and second nodes are ones of a number of such nodes. Each one of the nodes is coupled to at least one other node by at least one of a number of optical links. The nodes and links form the optical network. The virtual path has a bandwidth requirement associated therewith. Next, the service provider determines an amount of bandwidth available between the first and the second nodes. The service provider then allocates at least a portion of the amount of bandwidth available between the first and second nodes equal to the bandwidth requirement, so long as the bandwidth requirement is not greater than the amount of bandwidth available between the first and second nodes.